SSLRequire Directive

Denies access unless an arbitrarily complex boolean expression is true.

Category	Value
Syntax	`SSLRequire` `expression`
Example	`SSLRequire word ">=" word \|word "ge" word`
Default	None

Understanding the Expression Variable

The expression variable must match the following syntax (given as a BNF grammar notation):

expr ::= "true" | "false"
"!" expr
expr "&&" expr
expr "||" expr
"(" expr ")"

comp ::=word "==" word | word "eq" word
word "!=" word |word "ne" word
word "<" word |word "lt" word
word "<=" word |word "le" word
word ">" word |word "gt" word
word ">=" word |word "ge" word
word "=~" regex
word "!~" regex
wordlist ::= word
wordlist "," word

word ::= digit
cstring
variable
function

digit ::= [0-9]+

cstring ::= "..."

variable ::= "%{varname}"

Table G-6 and Table G-7 list standard and SSL variables. These are valid values for varname.

function ::= funcname "(" funcargs ")"

For funcname, the following function is available:

file(filename)

The file function takes one string argument, the filename, and expands to the contents of the file. This is useful for evaluating the file's contents against a regular expression.

Table G-6 lists the standard variables for SSLRequire Directive varname.

Table G-6 Standard Variables for SSLRequire Varname

Standard Variables	Standard Variables	Standard Variables
`HTTP_USER_AGENT`	`PATH_INFO`	`AUTH_TYPE`
`HTTP_REFERER`	`QUERY_STRING`	`SERVER_SOFTWARE`
`HTTP_COOKIE`	`REMOTE_HOST`	`API_VERSION`
`HTTP_FORWARDED`	`REMOTE_IDENT`	`TIME_YEAR`
`HTTP_HOST`	`IS_SUBREQ`	`TIME_MON`
`HTTP_PROXY_CONNECTION`	`DOCUMENT_ROOT`	`TIME_DAY`
`HTTP_ACCEPT`	`SERVER_ADMIN`	`TIME_HOUR`
`HTTP:headername`	`SERVER_NAME`	`TIME_MIN`
`THE_REQUEST`	`SERVER_PORT`	`TIME_SEC`
`REQUEST_METHOD`	`SERVER_PROTOCOL`	`TIME_WDAY`
`REQUEST_SCHEME`	`REMOTE_ADDR`	`TIME`
`REQUEST_URI`	`REMOTE_USER`	`ENV:variablename`
`REQUEST_FILENAME`

Table G-7 lists the SSL variables for SSLRequire Directive varname.

Table G-7 SSL Variables for SSLRequire Varname

SSL Variables	SSL Variables	SSL Variables
`HTTPS`	`SSL_PROTOCOL`	`SSL_CIPHER_ALGKEYSIZE`
`SSL_CIPHER`	`SSL_CIPHER_EXPORT`	`SSL_VERSION_INTERFACE`
`SSL_CIPHER_USEKEYSIZE`	`SSL_VERSION_LIBRARY`	`SSL_SESSION_ID`
`SSL_CLIENT_V_END`	`SSL_CLIENT_M_SERIAL`	`SSL_CLIENT_V_START`
`SSL_CLIENT_S_DN_ST`	`SSL_CLIENT_S_DN`	`SSL_CLIENT_S_DN_C`
`SSL_CLIENT_S_DN_CN`	`SSL_CLIENT_S_DN_O`	`SSL_CLIENT_S_DN_OU`
`SSL_CLIENT_S_DN_G`	`SSL_CLIENT_S_DN_T`	`SSL_CLIENT_S_DN_I`
`SSL_CLIENT_S_DN_UID`	`SSL_CLIENT_S_DN_S`	`SSL_CLIENT_S_DN_D`
`SSL_CLIENT_I_DN_C`	`SSL_CLIENT_S_DN_Email`	`SSL_CLIENT_I_DN`
`SSL_CLIENT_I_DN_O`	`SSL_CLIENT_I_DN_ST`	`SSL_CLIENT_I_DN_L`
`SSL_CLIENT_I_DN_T`	`SSL_CLIENT_I_DN_OU`	`SSL_CLIENT_I_DN_CN`
`SSL_CLIENT_I_DN_S`	`SSL_CLIENT_I_DN_I`	`SSL_CLIENT_I_DN_G`
`SSL_CLIENT_I_DN_Email`	`SSL_CLIENT_I_DN_D`	`SSL_CLIENT_I_DN_UID`
`SSL_CLIENT_CERT`	`SSL_CLIENT_CERT_CHAIN_n`	`SSL_CLIENT_ROOT_CERT`
`SSL_CLIENT_VERIFY`	`SSL_CLIENT_M_VERSION`	`SSL_SERVER_M_VERSION`
`SSL_SERVER_V_START`	`SSL_SERVER_V_END`	`SSL_SERVER_M_SERIAL`
`SSL_SERVER_S_DN_C`	`SSL_SERVERT_S_DN_ST`	`SSL_SERVER_S_DN`
`SSL_SERVER_S_DN_OU`	`SSL_SERVER_S_DN_CN`	`SSL_SERVER_S_DN_O`
`SSL_SERVER_S_DN_I`	`SSL_SERVER_S_DN_G`	`SSL_SERVER_S_DN_T`
`SSL_SERVER_S_DN_D`	`SSL_SERVER_S_DN_UID`	`SSL_SERVER_S_DN_S`
`SSL_SERVER_I_DN`	`SSL_SERVER_I_DN_C`	`SSL_SERVER_S_DN_Email`
`SSL_SERVER_I_DN_L`	`SSL_SERVER_I_DN_O`	`SSL_SERVER_I_DN_ST`
`SSL_SERVER_I_DN_CN`	`SSSL_SERVER_I_DN_T`	`SSL_SERVER_I_DN_OU`
`SSL_SERVER_I_DN_G`	`SSL_SERVER_I_DN_I`